Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Date: Sun, 20 Oct 2002 12:43:02 -0700
From: "J. Greenlees" <jaqui@shaw.ca>
To: users@httpd.apache.org
Message-id: <3DB30746.7060900@shaw.ca>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii; format=flowed
Content-transfer-encoding: 7BIT
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.0.1) Gecko/20020823
 Netscape/7.0
References: <DFEFIDNAGNEDMOEJMEJEEEAHIGAA.leegrey@mindspring.com>
Subject: Re: [users@httpd] Re: access log -- GET
 /scripts/..%%35%63../winnt/system32

actually, if you check the agreement with your isp, you will find a line 
that requires you to clean viruses out of your system, report the 
offending ip to their isp, they will have to clean it out.
(I send 10 mb of access log to my isp, since a lot of their clients had 
both codered and nimda, they thanked me and the number of these hits has 
dropped drastically)

Lee Grey wrote:
> On the other hand, given the fact that so many users have dynamic IP
> addresses, you are really blocking a number that can't be guaranteed to
> match the machine it came from at that moment.  The next day or two weeks
> later, you are probably still vulnerable to the same "attack" from the same
> infected machine, while having blocked access to your site by whatever
> innocent machine currently has that IP address.
> 
> Just a thought.
> 
> Best wishes,
> Lee Grey
> Grey Matter
> http://www.URLinOne.com
> 
> -----Original Message-----
> From: Jeff Beard [mailto:jeff@cyberxape.com]
> Sent: Sunday, October 20, 2002 2:24 PM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Re: access log -- GET
> /scripts/..%%35%63../winnt/system32
> 
> 
> 
> 
> PeterKorman wrote:
> [...]
> 
> 
>>So my question is this: It this sledgehammer I'm using likely to hurt me?
> 
> 
> No but neither is the worm.
> 
> --Jeff
> 
> 


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org